• bunee
• November 17, 2023
• No Comments

Attention Techies: CISA Adds Three New Security Flaws to Its Catalog

These Flaws are Anything but Flawless

In recent tech news, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) has been playing a game of high-stakes Bingo and its latest update, three new security flaws were added to its Known Exploited Vulnerabilities (KEV) catalog. They didn’t add these for fun, folks. CISA’s catalog updates are all based on solid evidence of active exploitation out in the wilds of the web. Time to buckle up!

Meet the Trio of Trouble

So, who are these notorious newcomers to the list? Let’s get acquainted:

• CVE-2023-36584 (CVSS score: 5.4): Also known as the Microsoft Windows Mark-of-the-Web (MotW) Security Feature Bypass Vulnerability. Despite its low CVSS score, don’t be fooled! This guy is the digital equivalent of a wolf in sheep’s clothing.
• The second rogue to be wary of, CVE-2023-1671 (CVSS score: 9.8), is yet to reveal it’s name but the high CVSS score should make you feel like you’re tiptoeing on the edge of a cyber-cliff.

Summary: Better Safe Than Sorry!

In summary, CISA’s recent updates to its KEV Catalog serve as gentle reminders in our ever-evolving digital environment to stay vigilant. Imagine CISA as your solid but somewhat overprotective digital dad, keeping a sharp cyber-eye out for you. So, let’s patch up these vulnerabilities quicker than you’d say ‘long live the firewall’, because it’s better to be safe than sorry when you’re navigating the high seas of the internet.

Speaking of Dads…

And, to lighten things up a bit, let’s end with a little tech-dad joke: Why don’t we tell secrets on the internet? Because it’s full of screens!

Stay Safe Out There folks!

Until our next tech update. Stay safe in the web’s wild wild west!

Original Article: https://thehackernews.com/2023/11/cisa-adds-three-security-flaws-with.html